WatchGuard Firebox System 4.6 User Guide
WatchGuard Firebox System 4.6 User Guide WatchGuard Firebox System 4.6 User Guide
HostWatch6 To change playback properties, select View => Play Back Controls.7 Type or use the scroll control to change the Sample Time Size interval.8 Use the slide bar to select a midpoint within the log file to begin playback.9 Click OK.Controlling the HostWatch displayYou can selectively control the HostWatch display. This feature can be useful formonitoring the activities of specific hosts, ports, or users.Viewing specific hostsFrom HostWatch:1 Select View => Filters.2 Click the Inside Hosts or Outside Hosts tab.3 Clear the Display All Hosts checkbox.4 In the New Host field, enter the IP address of the host to watch. Click Add.Repeat for each host that HostWatch should monitor.5 Click OK.Viewing specific portsFrom HostWatch:1 Select View => Filters.2 Click the Ports tab.3 Clear the Display All Ports checkbox.4 In the New Port field, enter the port number to monitor. Click Add.Repeat for each port that HostWatch should monitor.5 Click OK.Viewing authenticated usersFrom HostWatch:1 Select View => Filters.2 Click the Authenticated Users tab.3 Clear the Display All Authenticated Users checkbox.4 In the New User field, enter the user ID of the authenticated user to watch. ClickAdd.Repeat for each authenticated user that HostWatch should monitor.Inside hosts and authenticated users are displayed even if there are noconnections for them.5 Click OK.100
HostWatchModifying view propertiesYou can change how HostWatch displays information. For example, HostWatch candisplay host names rather than IP addresses. From HostWatch:1 Select View => Properties.2 Use the Host Display tab to modify host display and text options.3 Use the Line Color tab to choose colors for lines drawn between denied, dynamicNAT, proxy, and normal connections.4 Use the Misc. tab to control the refresh rate of the real-time display and themaximum number of connections displayed.User Guide 101
- Page 59 and 60: Defining service properties8 In the
- Page 61 and 62: Modifying a serviceThe following ex
- Page 63 and 64: Setting up proxy servicesSelecting
- Page 65 and 66: Setting up proxy servicesand transm
- Page 67 and 68: Service precedencecheck. In the lat
- Page 69 and 70: CHAPTER 9Controlling Web TrafficWeb
- Page 71 and 72: Configuring the WebBlocker serviceP
- Page 73 and 74: CHAPTER 10Setting Up NetworkAddress
- Page 75 and 76: Using service-based NATUsing servic
- Page 77 and 78: Configuring a service for incoming
- Page 79 and 80: CHAPTER 11Setting Up Logging andNot
- Page 81 and 82: Designating Event Processors for a
- Page 83 and 84: Setting up the LiveSecurity Event P
- Page 85 and 86: Setting global logging and notifica
- Page 87 and 88: Customizing logging and notificatio
- Page 89 and 90: CHAPTER 12Connect with Out-of-Band
- Page 91 and 92: Configuring the Firebox for OOB5 En
- Page 93: PART IVAdministering a SecurityPoli
- Page 96 and 97: Using host aliasesAdding a host ali
- Page 98 and 99: Configuring Firebox authenticationC
- Page 100 and 101: Configuring CRYPTOCard server authe
- Page 102 and 103: Using authentication to define remo
- Page 104 and 105: Firebox MonitorsSetting Firebox Mon
- Page 106 and 107: Firebox MonitorsLogging optionsLogg
- Page 108 and 109: HostWatchARP tableA snapshot of the
- Page 112 and 113: HostWatch102
- Page 114 and 115: Viewing files with LogViewer2 Confi
- Page 116 and 117: Working with log filesIP header len
- Page 118 and 119: Working with log files108
- Page 120 and 121: Specifying report sectionsCreating
- Page 122 and 123: Exporting reports6 Enter the number
- Page 124 and 125: Scheduling and running reportsDelet
- Page 126 and 127: Report sections and consolidated se
- Page 128 and 129: Report sections and consolidated se
- Page 130 and 131: 120
- Page 132 and 133: Using DVCP to connect to devices•
- Page 134 and 135: Branch office VPN with IPSecFrom Po
- Page 136 and 137: Branch office VPN with IPSecdescrib
- Page 138 and 139: Branch office VPN with IPSecbe acce
- Page 140 and 141: Configuring WatchGuard VPNConfiguri
- Page 142 and 143: Configuring WatchGuard VPN• Watch
- Page 144 and 145: Configuring shared servers for RUVP
- Page 146 and 147: Configuring the Firebox for Remote
- Page 148 and 149: Configuring the Firebox for Mobile
- Page 150 and 151: Configuring debugging optionsA prom
- Page 152 and 153: Preparing the client computers• P
- Page 154 and 155: Preparing the client computers10 Cl
- Page 156 and 157: Using Remote User PPTPInstalling a
- Page 158 and 159: Configuring debugging options148
HostWatchModifying view propertiesYou can change how HostWatch displays information. For example, HostWatch candisplay host names rather than IP addresses. From HostWatch:1 Select View => Properties.2 Use the Host Display tab to modify host display and text options.3 Use the Line Color tab to choose colors for lines drawn between denied, dynamicNAT, proxy, and normal connections.4 Use the Misc. tab to control the refresh rate of the real-time display and themaximum number of connections displayed.<strong>User</strong> <strong>Guide</strong> 101